last executing test programs: 15m32.124008162s ago: executing program 4 (id=224): r0 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100), 0xf}], 0x492492492492642, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) syz_clone(0x2000300, 0x0, 0x35, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x20, 0x60, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) 15m28.352257738s ago: executing program 4 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x480) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f00000000c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x20000814, &(0x7f0000000080)={0xa, 0x4e23, 0x5d, @loopback, 0x2}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001ec) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 15m26.341388379s ago: executing program 4 (id=234): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2d, &(0x7f0000000480)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000500), 0x8, 0x26, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1a, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0xc53, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000003fffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_COPY(r7, 0x4b72, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000000)={0x0, 0x7f, '\x00', 0x9, 0xf1}) 15m21.789915191s ago: executing program 4 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) fcntl$setsig(r1, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1780f9c373410dea) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 15m16.253173928s ago: executing program 4 (id=249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) fcntl$setsig(r1, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1780f9c373410dea) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15m12.826913086s ago: executing program 4 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r4, r5, 0x0, 0x80001d00c0d1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x0) 14m56.930058023s ago: executing program 32 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r4, r5, 0x0, 0x80001d00c0d1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x0) 10m42.47322643s ago: executing program 5 (id=689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000034) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r3) fcntl$setsig(r2, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1780f9c373410dea) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 10m40.92468251s ago: executing program 5 (id=692): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_stats={0x1d, 0x1, [0x1000]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, r8, {}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10m38.905018333s ago: executing program 5 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4ef2, &(0x7f0000000040)={0x0, 0x8213, 0x800, 0x0, 0x1eb}, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000040)={0x2, 0x3, [{0x1, 0x0, 0x3}, {0x5, 0x0, 0x80000001}]}) 10m35.971307046s ago: executing program 5 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x480) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x20000814, &(0x7f0000000080)={0xa, 0x4e23, 0x5d, @loopback, 0x2}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001ec) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000000100)='0', 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 10m33.742526455s ago: executing program 5 (id=705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r5, r6, 0x0, 0x80001d00c0d1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x0) 10m31.189467702s ago: executing program 5 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4ef2, 0x0, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000040)={0x1, 0x3, [{0x1, 0x0, 0x3}]}) 10m15.957910876s ago: executing program 33 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4ef2, 0x0, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000040)={0x1, 0x3, [{0x1, 0x0, 0x3}]}) 4m30.645415985s ago: executing program 0 (id=1558): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) setns(0xffffffffffffffff, 0x2000000) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r4, 0x102000) ioctl$BLKRRPART(r4, 0x125f, 0xf0ffff) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa00, 0x2, 0x0) 4m29.345816144s ago: executing program 0 (id=1561): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x18}}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 1) 4m28.450883035s ago: executing program 0 (id=1562): fsopen(0x0, 0x0) 4m28.335075519s ago: executing program 0 (id=1563): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x1, r2, r1, 0x1c, 0x6, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x8, r5, 0x0, 0xfffffffffffffffe, 0xb1, &(0x7f0000000d40)="4c4c4c4c4c4c4c4c4c4c4c4cc8de9f4c4c4c4c4cd1cc847b24a703e205bfd0eda31b7b85a318a627a265db792cfbee8f64e2dcec19b910f66810d078226ac031b401f30e1ab7ba1e2cd27be7edf7cac8ae4e989fdbfa06dcb0b60cc5dd3432f89bc0077e78972348b7eb18dea12cf6a42eb611a7649e049d902a98379f750c567f84618a9566ac99a8006b20caaf09ce82a13c0fd0b6b707e488c484ef5d5b72b6316fe216705938c575dc0f9b0137ea4a", 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 4m28.161404249s ago: executing program 0 (id=1564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x41, 0x10, 0x9, 0x0, 0x50, 0x80}, 0x9c) 4m27.946046122s ago: executing program 0 (id=1568): eventfd2(0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x80000000000000, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x1, 0x800000000000c333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x4, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x77f14453, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0xfffffffffffffff9, 0x5, 0xe36, 0x3, 0x7, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x1000002, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xee, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0xffffffffffffffff, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7, 0x420800) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0) 4m12.571714994s ago: executing program 34 (id=1568): eventfd2(0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x80000000000000, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x1, 0x800000000000c333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x4, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x77f14453, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0xfffffffffffffff9, 0x5, 0xe36, 0x3, 0x7, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x1000002, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xee, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0xffffffffffffffff, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7, 0x420800) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0) 8.560146222s ago: executing program 7 (id=2347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000000021000002000000", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRES64=r4], 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES16=r8, @ANYBLOB="01002b1873913c79e94345dbbd7000fedbdf2505000000080009000200000008000c00aa0a0000060001000500000008000b0004000000140008006d616373656330000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) mq_notify(r5, &(0x7f0000000300)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}) open(0x0, 0x48141, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 7.097987357s ago: executing program 7 (id=2354): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000006c0)="69441f9b476d371c875caee4b151614c23438fd609ed26e5fd162f8426c16a3d5e928c450cb0992ac6541299d79e83db31727dbe39d4fe5064c9c252c8237e866d218a26f04767f638cf564ac2b0fdd560bc9f08", 0x54}], 0x2}, 0x4) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x11}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000020000040"]) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000002640)=""/4107, 0x100b, 0x535) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610007000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000580)='1\x00', 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x7c, 0x30, 0xcac229faa96ee7df, 0x0, 0x20000, {}, [{0x68, 0x1, [@m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x6, 0x1, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x500}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c181, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x302, 0x1a4) write$cgroup_pid(r9, &(0x7f0000000280), 0x3) r10 = fsopen(&(0x7f0000000100)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) 5.868019803s ago: executing program 6 (id=2363): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)='>', 0x1}], 0x1) mount(0x0, 0x0, 0x0, 0x2011011, 0x0) close(r0) 5.057727062s ago: executing program 6 (id=2364): fsopen(&(0x7f0000000040)='ext3\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454d20fab6a06418858dd64607030003000000070000000002003e00000000000103000038000000000000000f0000000000200f01f40300040000000000200003000000c0ffffff0180000010f9dbf54e302822010100000900001008000000"], 0x58) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x118) 4.780922775s ago: executing program 6 (id=2366): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000020000040"]) 3.432483004s ago: executing program 1 (id=2369): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fd", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347c", 0xc}], 0x2}], 0x1, 0x40800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.361966645s ago: executing program 7 (id=2370): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) unshare(0x180) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ptrace$getenv(0x4201, 0x0, 0x188, 0x0) mmap$KVM_VCPU(&(0x7f00000e8000/0x1000)=nil, r3, 0x2000008, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) dup(r2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}, @ringbuf_query]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.288034462s ago: executing program 2 (id=2371): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x840) 3.167712451s ago: executing program 3 (id=2372): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {0x0}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)}, {&(0x7f0000000ac0)=""/166, 0xa6}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/60, 0x3c}], 0x6, &(0x7f0000000f00)=""/80, 0x50}, 0x1}], 0x2, 0x40012020, 0x0) 3.167193305s ago: executing program 1 (id=2373): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x3, 0xc64, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x20, 0x101, 0x10001}}) 3.16610621s ago: executing program 2 (id=2374): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x7047, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x5, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x3ffffff, 0x7, 0x60, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x4, 0x6, 0x7, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0x6, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x6, 0x7, 0x0, 0xe, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x1, 0x20000000, 0xc0f, 0x80000001, 0x3, 0x5, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x6, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x47fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x4, 0xd, 0x4, 0x6, 0xe, 0x5, 0x4, 0x80, 0x5, 0x3, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x2, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xfffd, 0x7, 0x6, 0x2, 0x7f, 0x8, 0x2, 0x7, 0x100, 0x8008, 0x0, 0x1ff, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x3, 0x7, 0x2, 0x5, 0x8, 0x0, 0x8000, 0x8, 0xffffff81, 0x80000800, 0x6, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0x1, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x400001, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x4000007, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x9, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000000500)=""/210) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 3.007702989s ago: executing program 3 (id=2375): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x30}, &(0x7f0000000140)=0xc) 2.817133772s ago: executing program 3 (id=2376): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'macvlan0\x00', &(0x7f0000002fc0)=@ethtool_cmd={0x7, 0x4, 0x7fff, 0x3, 0x5b, 0x1, 0x10, 0x6, 0x5, 0x2, 0xa, 0x7, 0x4, 0xf9, 0x7, 0x8, [0x4f8, 0x3]}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) getresuid(&(0x7f0000004f80), &(0x7f0000004fc0), &(0x7f0000005000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mq_timedsend(r2, &(0x7f0000000080)="8ed9a4fe9dd97af48983d0f7c363f5ae93296aab868fb67fd95ef76c871aba10da4f826351423484d4", 0x29, 0x2, &(0x7f00000000c0)) clock_gettime(0x9, &(0x7f0000000280)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) r6 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000840400001c0012800b000100697036746e6c00000c00028006000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) 2.816164472s ago: executing program 1 (id=2377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70100000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa0140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x15, 0x7, 0x0, 0x80000002, 0x7, 0xe, 0x4, 0x81, 0xe5, 0xb0, 0x3, 0x0, 0x78, 0x10, 0x4, 0x18, 0xff, 0x2, '\x00', 0x2, 0xae}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000000500030002000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e002000090780000131218badf75768914ae2e134f070b2b6403131236eb5601e338288be856bc4ceb464bdc"], 0x0) semget$private(0x0, 0x4000000009, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r7, r7, 0x0, 0x9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a7379a420305230303030303030303030303030303430393300"], 0x2a, 0x0) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r8, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d72658161746976653a31"]) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0xb00, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.033159792s ago: executing program 6 (id=2378): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0640000004000000fc0f00000a000000000000002b31362427c39a6e650ddc44a8b54f5e89fbbff9953ca7109ccf5b4501670561727d8e2ec476b16b602f3f68b7138df700020000b37a9c3f7b4100bff9e465b7420deaf4f768755ddc57e1d02cf01804d20bed9912c44a233212b8b07728b0178b876418e1597f0cec9871257a745461f51e7f6eceac6c0cad"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016000100000a000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x44) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xb, &(0x7f0000002240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) close_range(r0, r5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x60) 1.799731734s ago: executing program 2 (id=2379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuacct'}]}) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ufs\x00', 0x4000, 0x0) 1.61319434s ago: executing program 6 (id=2380): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'macvlan0\x00', &(0x7f0000002fc0)=@ethtool_cmd={0x7, 0x4, 0x7fff, 0x3, 0x5b, 0x1, 0x10, 0x6, 0x5, 0x2, 0xa, 0x7, 0x4, 0xf9, 0x7, 0x8, [0x4f8, 0x3]}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) getresuid(&(0x7f0000004f80), &(0x7f0000004fc0), &(0x7f0000005000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mq_timedsend(r2, &(0x7f0000000080)="8ed9a4fe9dd97af48983d0f7c363f5ae93296aab868fb67fd95ef76c871aba10da4f826351423484d4", 0x29, 0x2, &(0x7f00000000c0)) clock_gettime(0x9, &(0x7f0000000280)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) r6 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000840400001c0012800b000100697036746e6c00000c00028006000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000200)) memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) 1.528913993s ago: executing program 7 (id=2381): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000003240)=[{{&(0x7f0000000180)=@caif=@dgm, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x3, &(0x7f00000004c0)=""/254, 0xfe}, 0x3}, {{&(0x7f0000000680)=@qipcrtr, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000880)=""/5, 0x5}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/110, 0x6e}, {&(0x7f0000000980)=""/164, 0xa4}, {&(0x7f0000000a40)=""/150, 0x96}, {&(0x7f0000000b00)=""/101, 0x65}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x9, &(0x7f0000002d00)=""/105, 0x69}, 0x6f9}, {{&(0x7f0000002d80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003100)=[{&(0x7f0000003300)=""/132, 0x84}, {&(0x7f0000002e80)=""/141, 0x8d}, {&(0x7f0000002f40)=""/192, 0xc0}, {&(0x7f0000000b80)=""/22, 0x16}], 0x4, &(0x7f0000003180)=""/133, 0x85}, 0x23d9}], 0x3, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) lsm_get_self_attr(0x68, &(0x7f0000000280)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f0000000000)=0x104, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close_range(r0, 0xffffffffffffffff, 0x0) 1.238646975s ago: executing program 3 (id=2382): r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80, 0x2, 0x8, 0x8, 0x6, 0xafb8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x48, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r7}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x100, 0x2000000000000000, 0xa0022, r7}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000060080000000000000000000009500150000000000", @ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="e714fd606b4dc7d100bae9c54e4273ed50a67188343a2fdf8903001c530b910589e25e23826febe8c013de810351cb1adcbdd0eff993bb1878435e2913a421fe7142c4d5a5897f23762ad38194a948c2f31ca64de181ca485aeb4793946a3fccef8050ca41c031a277ef6eab0f392dad0112b8b5f6b29a71a220da4c5e4b30c5bd4d41ed90bcff2a937e117317963ba8dbc4dee0bd1a1d062c8b3e0c3a0f", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r7, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000480)={0x0, 0x0, 0xf324}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) r12 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x880) r14 = fsmount(r12, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r14, @ANYRES32=r9, @ANYBLOB="120000000400000000000000"], 0x10) 1.089075733s ago: executing program 7 (id=2383): r0 = socket(0x2b, 0x800, 0x3ff) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0xc1a30761e76374c7, 0x12, r0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x1000}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 1.08415509s ago: executing program 1 (id=2384): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fd", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347c", 0xc}], 0x2}], 0x1, 0x40800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 857.028636ms ago: executing program 1 (id=2385): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0xa, @private1, 0x8000}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000006b80)="0a4d6457a9a1299163a2ac3515b83deb02bc64f84b975df5456a50d05457322fb19ef98c7e84f658c24bc37701a68270406a2b12d228fe95ece2790bf9e6a77d4fa477524827f7acf9cff0aee8885256bb6f2652a24743eef3ebd7257306b9451a1025d115b305b1237827a34f7747c3c2416a23d64c8bb7baaae630361555b5b655aa27e894f3d1a77ee4914761c9b86c4adb618730485a188af4cfbf3061030f4582baaba5", 0xa6, 0x80, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b30, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/232, 0xe8}, {&(0x7f0000000b80)=""/67, 0x43}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x7, &(0x7f00000008c0)=""/243, 0xf3}}, {{&(0x7f00000009c0)=@l2, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/165, 0xa5}, {&(0x7f0000006a80)=""/216, 0xd8}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000c80)=""/213, 0xd5}, {&(0x7f0000000d80)=""/216, 0xd8}], 0x6, &(0x7f0000000f00)=""/197, 0xc5}, 0x1}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f0000001000)=""/118, 0x76}, {&(0x7f0000001080)=""/138, 0x8a}, {&(0x7f0000002400)=""/185, 0xb9}], 0x4, &(0x7f00000024c0)=""/117, 0x75}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/168, 0xa8}, {&(0x7f0000003600)=""/18, 0x12}, {&(0x7f0000003640)=""/70, 0x46}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/36, 0x24}, {0x0}], 0x7, &(0x7f0000005780)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000006780)=@pppoe, 0x80, &(0x7f0000006880)}, 0x1}], 0x5, 0x2020, &(0x7f0000006a00)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') cachestat(r5, 0x0, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000006c40)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x24, 0x7, 0x8, 0x62a, 0xffff2b7d, 0x2, "af0c7e649c63214ddaf064c294e7916fc0e3ad2e8f52fd81eb9997717c4c8bf45af4a79d"}}, 0x13c) sendto$inet6(r4, &(0x7f0000001180)="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", 0x250, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="90", 0x1, 0x20000842, 0x0, 0xfffffffffffffed4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6565e", 0x3}], 0x1}}], 0x2, 0x40800) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006800)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1, 0x800, 0x9, 0xf, 0xfff}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000c00)=r1, 0x4) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 808.949638ms ago: executing program 7 (id=2386): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940), 0xc02, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000a80)={0x101, 0xa, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x13, 0xc, "2b7c81f1817979f0d6881d6b479dd9"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0x3e, 0xc, "292852f94b324fff1007f738c5e7a6531b23b9467ea57ad52186bb27f94e116d6a62e8658efc207a50905b368a05364709ba395a3dde7209ebea"}, @NFTA_CHAIN_USERDATA={0x2e, 0xc, "ff4df18abf2a2f8b7d5850de55e122b9a42ae2db0319cc3bf9f3a5a800f00e589ef4892f12a11d328324"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}]}]}], {0x14}}, 0x168}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$inet_udp(0x2, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x58) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="402b10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd28, 0xfffffffe, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xfffffffffffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x160, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 749.371245ms ago: executing program 3 (id=2387): mount$fuse(0x8c, 0x0, 0x0, 0xc8004, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$pokeuser(0x6, r0, 0x378, 0x3) (async) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 729.238603ms ago: executing program 1 (id=2388): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x4) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000020000040"]) 660.640798ms ago: executing program 6 (id=2389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r4) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0001ba", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250f00000076fc0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0001ba", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250f00000076fc0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb9, 0x7d, 0x9a, 0x40, 0x1943, 0x2257, 0x1ff9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x2, 0xa, 0x40, 0xaf, 0xc, [], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0xe0, 0x9b, 0xb}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x8, 0x6, 0x5}}]}}]}}]}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a03147319c479629d9f33fa8333e92d7ae1ac640484f106429fad2a11f742655"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004004}, 0xd504a7414e614e19) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a03147319c479629d9f33fa8333e92d7ae1ac640484f106429fad2a11f742655"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004004}, 0xd504a7414e614e19) 416.516975ms ago: executing program 2 (id=2390): r0 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) unshare(0x180) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ptrace$getenv(0x4201, 0x0, 0x188, 0x0) mmap$KVM_VCPU(&(0x7f00000e8000/0x1000)=nil, r3, 0x2000008, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) dup(r2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}, @ringbuf_query]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.719202ms ago: executing program 2 (id=2392): rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000500)}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB="45a30000000000000f00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000064000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000080000008500000083000000b70900000000000055090100000000009500b90000000000bf91000000000000b7020000020000008500000000000000b70000000000000095000000000000003a79b28c0b83a66eff15ae67df3c45cbbd2f6a3fd9a472309e965642c528554b5eae103d174a"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r4 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nwHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x2012, r7, 0x6fa88000) 0s ago: executing program 3 (id=2393): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000480)={0x561ace40, 0x8}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)=ANY=[@ANYBLOB="6c000000180001002bbd7000fcdbdf2502180000000000080000004008000100ac14140008001e000900000008000300", @ANYRES32=0x0, @ANYBLOB="0800100180000000080005007f00"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r3 = socket$inet(0x2, 0x3, 0x8) syz_io_uring_setup(0x72c, &(0x7f00000008c0)={0x0, 0x22a5, 0x4000, 0x2, 0x2de, 0x0, r2}, &(0x7f0000000940), &(0x7f0000000980)) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'gre0\x00', r4, 0x8, 0x8, 0x5f8, 0x1, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x64, 0x0, 0x8d, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x0, [{@loopback, 0x1}, {@multicast2, 0x6}, {@private=0xa010101, 0x6}, {@remote, 0x4}]}]}}}}}) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): : USB disconnect, device number 51 [ 969.605759][ T29] audit: type=1400 audit(1739249141.269:685): avc: denied { lock } for pid=14509 comm="syz.6.1940" path="socket:[41789]" dev="sockfs" ino=41789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 969.880609][ T9646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 969.892268][T10748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 969.917193][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.526652][ T9578] Bluetooth: hci0: unexpected event for opcode 0xcb1d [ 972.943501][ T9578] Bluetooth: hci1: unexpected event for opcode 0xcb1d [ 974.879472][ T8] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 975.060742][ T5865] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 975.276185][ T8] usb 3-1: No LPM exit latency info found, disabling LPM. [ 975.300676][ T8] usb 3-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 975.322191][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 975.339837][ T8] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.361998][ T5865] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 975.383738][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 975.409276][ T5865] usb 7-1: config 0 has no interface number 0 [ 975.438798][ T5865] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 975.441410][ T8] usb 3-1: string descriptor 0 read error: -22 [ 975.506998][T14573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.536624][ T5865] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 975.546039][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 975.580567][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.589552][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.597609][ T5865] usb 7-1: Product: syz [ 975.634530][ T5865] usb 7-1: Manufacturer: syz [ 975.639971][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 975.646919][T14567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 975.679264][ T5865] usb 7-1: SerialNumber: syz [ 975.689960][ T5865] usb 7-1: config 0 descriptor?? [ 975.809624][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.869459][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.016252][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.029559][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.103110][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.115628][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.146703][T14564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1952'. [ 976.316916][ T5870] usb 3-1: USB disconnect, device number 52 [ 976.638418][ T5865] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 976.705376][ T5865] usb 7-1: USB disconnect, device number 26 [ 976.811750][ T9578] Bluetooth: hci1: unexpected cc 0x2002 length: 9 > 4 [ 976.818549][ T9578] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 977.050526][T14596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.076867][T14596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.267582][T14602] overlayfs: failed to resolve './file1': -2 [ 978.259339][ T8] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 978.522586][ T8] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 978.732515][ T8] usb 3-1: config 0 has no interface number 0 [ 978.738669][ T8] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 978.787819][T14616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.809456][ T8] usb 3-1: config 0 interface 11 has no altsetting 0 [ 978.816248][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 978.888264][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.906104][ T8] usb 3-1: config 0 descriptor?? [ 978.921051][T14616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.974993][T14604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 978.986281][ T8] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 979.578368][T10748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 979.594394][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 979.602895][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 979.631207][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.790056][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 979.798176][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 979.806968][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 979.815643][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 979.849671][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.881184][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 979.915360][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 979.925500][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 979.936233][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 979.972496][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 979.997694][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 980.016777][ T8] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 980.084021][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 980.229458][T10748] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 980.339923][ T5872] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 980.512284][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 980.539285][T10748] usb 8-1: Using ep0 maxpacket: 32 [ 980.545892][ T5872] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 980.545941][T10748] usb 8-1: config index 0 descriptor too short (expected 16420, got 36) [ 980.569353][T10748] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.582372][T10748] usb 8-1: config 0 has no interfaces? [ 980.588186][T10748] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 980.798302][T10748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.076133][ T5872] usb 7-1: config 0 has no interface number 0 [ 981.082436][ T5872] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 981.085427][T10748] usb 8-1: config 0 descriptor?? [ 981.094286][ T5872] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 981.109481][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.122823][ T5872] usb 7-1: Product: syz [ 981.132476][ T5872] usb 7-1: Manufacturer: syz [ 981.140972][ T8] usb 3-1: USB disconnect, device number 53 [ 981.151909][ T5872] usb 7-1: SerialNumber: syz [ 981.192697][ T5872] usb 7-1: config 0 descriptor?? [ 981.230586][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 981.267723][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 981.295004][ T8] keyspan 3-1:0.11: device disconnected [ 981.400762][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 981.720140][T14644] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 981.728324][T14644] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 981.738181][T14644] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 981.747239][T14644] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 982.102377][T14625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.117128][T14625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.178407][ T5872] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 982.249560][ T5872] usb 7-1: USB disconnect, device number 27 [ 982.409390][ T970] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 982.722329][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 982.734193][ T970] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 982.821870][ T970] usb 3-1: config 0 has no interface number 0 [ 982.828761][ T970] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 983.130493][ T970] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 983.291733][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.395438][ T970] usb 3-1: Product: syz [ 983.401932][ T970] usb 3-1: Manufacturer: syz [ 983.406915][ T970] usb 3-1: SerialNumber: syz [ 983.412633][T10748] usb 8-1: string descriptor 0 read error: -71 [ 983.430762][T10748] usb 8-1: USB disconnect, device number 12 [ 983.470186][ T970] usb 3-1: config 0 descriptor?? [ 983.644658][T14658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.681817][T14658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.885783][T14665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.910362][ T5872] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 984.339651][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 984.440558][T14665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.462256][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.496859][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.530093][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.559301][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.605224][ T970] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 984.620373][ T970] usb 3-1: USB disconnect, device number 54 [ 984.630570][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.681914][ T5872] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 984.723844][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.756344][ T5872] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.762900][ T9578] Bluetooth: hci5: command 0x0406 tx timeout [ 984.775535][ T5872] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.805596][ T5872] usb 7-1: Manufacturer: syz [ 984.857325][ T5872] usb 7-1: config 0 descriptor?? [ 985.209363][ T5872] rc_core: IR keymap rc-hauppauge not found [ 985.215405][ T5872] Registered IR keymap rc-empty [ 986.028719][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 986.049390][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 986.102708][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 986.153122][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input82 [ 986.330467][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 986.412426][T14687] syz.2.1988: attempt to access beyond end of device [ 986.412426][T14687] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 986.866218][T11502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 986.880015][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 986.910486][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 986.932780][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 986.974463][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 987.063169][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 987.136506][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 987.161121][ T29] audit: type=1400 audit(1739249158.829:686): avc: denied { create } for pid=14686 comm="syz.3.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 987.191106][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 987.260632][T14688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 987.345263][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 987.379365][ T5872] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 987.388057][T14691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14691 comm=syz.3.1990 [ 987.424950][ T5872] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 987.438599][ T5872] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 987.488627][ T5872] usb 7-1: USB disconnect, device number 28 [ 987.693262][T14695] netlink: 'syz.2.1993': attribute type 21 has an invalid length. [ 988.265807][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 988.638506][T14708] FAULT_INJECTION: forcing a failure. [ 988.638506][T14708] name failslab, interval 1, probability 0, space 0, times 0 [ 988.792744][T14708] CPU: 0 UID: 0 PID: 14708 Comm: syz.6.1997 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 988.792772][T14708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 988.792783][T14708] Call Trace: [ 988.792788][T14708] [ 988.792795][T14708] dump_stack_lvl+0x16c/0x1f0 [ 988.792821][T14708] should_fail_ex+0x50a/0x650 [ 988.792844][T14708] ? fs_reclaim_acquire+0xae/0x150 [ 988.792867][T14708] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x9c/0x510 [ 988.792892][T14708] should_failslab+0xc2/0x120 [ 988.792907][T14708] __kmalloc_cache_noprof+0x68/0x410 [ 988.792928][T14708] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x9c/0x510 [ 988.792949][T14708] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 988.792964][T14708] snd_mixer_oss_ioctl1+0xaf9/0x1cf0 [ 988.792979][T14708] ? tomoyo_path_number_perm+0x298/0x590 [ 988.792994][T14708] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 988.793009][T14708] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 988.793026][T14708] ? tomoyo_path_number_perm+0x190/0x590 [ 988.793040][T14708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 988.793057][T14708] ? do_vfs_ioctl+0x513/0x1990 [ 988.793072][T14708] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 988.793088][T14708] snd_mixer_oss_ioctl_card+0x103/0x180 [ 988.793102][T14708] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 988.793118][T14708] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 988.793137][T14708] snd_pcm_oss_ioctl+0x136d/0x3780 [ 988.793150][T14708] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 988.793162][T14708] ? selinux_file_ioctl+0x180/0x270 [ 988.793176][T14708] ? selinux_file_ioctl+0xb4/0x270 [ 988.793199][T14708] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 988.793210][T14708] __x64_sys_ioctl+0x190/0x200 [ 988.793225][T14708] do_syscall_64+0xcd/0x250 [ 988.793238][T14708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.793253][T14708] RIP: 0033:0x7f6db058cde9 [ 988.793263][T14708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.793273][T14708] RSP: 002b:00007f6db1423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.793284][T14708] RAX: ffffffffffffffda RBX: 00007f6db07a5fa0 RCX: 00007f6db058cde9 [ 988.793291][T14708] RDX: 0000400000001480 RSI: 00000000c0044dff RDI: 0000000000000003 [ 988.793297][T14708] RBP: 00007f6db1423090 R08: 0000000000000000 R09: 0000000000000000 [ 988.793303][T14708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.793309][T14708] R13: 0000000000000000 R14: 00007f6db07a5fa0 R15: 00007ffe176a1cc8 [ 988.793323][T14708] [ 989.350262][T10748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 989.384393][ T9578] Bluetooth: hci0: unexpected event for opcode 0xcb1d [ 989.620862][ T9578] Bluetooth: hci5: unexpected event for opcode 0xcb1d [ 990.093132][T14720] fuse: Bad value for 'fd' [ 990.200548][T14717] tmpfs: Bad value for 'mpol' [ 990.246328][ T29] audit: type=1326 audit(1739249161.909:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.3.2001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3a18cde9 code=0x0 [ 990.805423][ T8] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 991.219490][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 991.240622][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.262129][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.291484][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 991.294935][ T9578] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 991.330758][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 991.429677][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.444157][ T8] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 991.454228][ T8] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 991.463604][ T8] usb 7-1: Manufacturer: syz [ 991.619358][ T970] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 992.238845][ T8] usb 7-1: config 0 descriptor?? [ 992.280983][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 992.331948][ T9578] Bluetooth: hci1: unexpected event for opcode 0xcb1d [ 992.440176][T14740] xt_socket: unknown flags 0x50 [ 992.521611][T14740] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 992.666973][ T970] usb 2-1: No LPM exit latency info found, disabling LPM. [ 992.688046][ T970] usb 2-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 992.701331][ T970] usb 2-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.801351][ T970] usb 2-1: config 1 interface 0 has no altsetting 0 [ 992.843551][ T970] usb 2-1: string descriptor 0 read error: -22 [ 992.853826][ T970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 992.876264][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.899327][ T8] rc_core: IR keymap rc-hauppauge not found [ 992.905283][ T8] Registered IR keymap rc-empty [ 992.928126][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.934610][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.938688][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.951985][T14737] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 993.059360][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.089774][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 993.170075][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input83 [ 993.317809][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.341272][T14733] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2009'. [ 993.403969][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.470190][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.472046][ T5872] usb 2-1: USB disconnect, device number 40 [ 993.509288][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.569289][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.629305][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.709316][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.749679][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.789313][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.839423][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.870537][T14754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.905288][ T8] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 993.932019][ T8] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 993.989585][ T8] usb 7-1: USB disconnect, device number 29 [ 994.202699][ T9578] Bluetooth: hci5: unexpected event for opcode 0xcb1d [ 994.240667][ T29] audit: type=1400 audit(1739249165.909:688): avc: denied { write } for pid=14760 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 995.376497][ T9578] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 995.385737][ T9578] Bluetooth: hci0: Injecting HCI hardware error event [ 995.396412][ T9578] Bluetooth: hci0: hardware error 0x00 [ 995.676004][ T29] audit: type=1400 audit(1739249167.339:689): avc: denied { write } for pid=14776 comm="syz.1.2021" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 995.679011][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2020'. [ 995.779377][ T29] audit: type=1400 audit(1739249167.379:690): avc: denied { ioctl } for pid=14776 comm="syz.1.2021" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 996.127177][T14789] xt_socket: unknown flags 0x50 [ 996.271037][T14789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap16 [ 996.309831][T14789] batman_adv: batadv0: Adding interface: ip6gretap16 [ 996.316885][T14789] batman_adv: batadv0: The MTU of interface ip6gretap16 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.343045][T14789] batman_adv: batadv0: Not using interface ip6gretap16 (retrying later): interface not active [ 997.087312][T14790] xt_socket: unknown flags 0x50 [ 997.179126][T14790] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 997.208463][T14790] batman_adv: batadv0: Adding interface: ip6gretap3 [ 997.215346][T14790] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.243391][T14790] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active [ 997.479914][ T9578] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 997.503956][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.512613][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.816023][ T29] audit: type=1400 audit(1739249169.469:691): avc: denied { map } for pid=14804 comm="syz.2.2029" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 997.869605][ T5872] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 997.890865][T14805] tipc: Started in network mode [ 997.896038][T14805] tipc: Node identity 4, cluster identity 4711 [ 997.919439][ T29] audit: type=1400 audit(1739249169.509:692): avc: denied { create } for pid=14804 comm="syz.2.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 997.940550][T14805] tipc: Node number set to 4 [ 997.946477][ T29] audit: type=1400 audit(1739249169.559:693): avc: denied { shutdown } for pid=14806 comm="syz.1.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 998.042283][ T8228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 998.093093][ T5872] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 998.107481][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.152285][ T5872] usb 7-1: config 0 descriptor?? [ 998.182434][ T5872] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 998.249532][T14816] autofs: Unknown parameter 'keyring' [ 998.276814][ T29] audit: type=1400 audit(1739249169.919:694): avc: denied { connect } for pid=14812 comm="syz.2.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 998.276896][ T29] audit: type=1400 audit(1739249169.919:695): avc: denied { ioctl } for pid=14812 comm="syz.2.2031" path="socket:[42924]" dev="sockfs" ino=42924 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 998.641784][ T5872] gp8psk: usb in 128 operation failed. [ 998.859458][T10748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 998.901541][ T5872] gp8psk: usb in 146 operation failed. [ 998.901560][ T5872] gp8psk: failed to get FW version [ 998.903119][ T5872] gp8psk: FPGA Version = 144 [ 999.110408][ T5872] gp8psk: usb in 138 operation failed. [ 999.110445][ T5872] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 999.110474][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 999.120124][ T5872] usb 7-1: USB disconnect, device number 30 [ 999.199326][ T970] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 999.366295][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 999.479880][ T970] usb 8-1: Using ep0 maxpacket: 16 [ 999.592374][ T970] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 999.649460][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 999.713450][ T970] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 999.765942][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.845276][ T29] audit: type=1400 audit(1739249171.509:696): avc: denied { ioctl } for pid=14832 comm="syz.2.2039" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 999.849281][ T970] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.950246][T14838] team0: entered promiscuous mode [ 999.955398][T14838] team_slave_0: entered promiscuous mode [ 999.961728][T14838] team_slave_1: entered promiscuous mode [ 1000.069261][T14837] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1000.077997][T14837] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1000.090934][T14837] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1000.098847][T14837] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1000.199504][ T25] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1001.856950][T14832] team0: left promiscuous mode [ 1001.871253][T14832] team_slave_0: left promiscuous mode [ 1001.877374][T14832] team_slave_1: left promiscuous mode [ 1002.279960][ T9578] Bluetooth: hci1: unexpected event for opcode 0xcb1d [ 1002.536506][ T970] usb 8-1: string descriptor 0 read error: -71 [ 1002.542890][ T970] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1002.590842][ T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.611292][ T29] audit: type=1400 audit(1739249174.269:697): avc: denied { connect } for pid=14844 comm="syz.6.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1002.634412][ T970] usb 8-1: config 0 descriptor?? [ 1002.644638][ T970] usb 8-1: can't set config #0, error -71 [ 1002.651509][ T970] usb 8-1: USB disconnect, device number 13 [ 1002.663540][T14202] udevd[14202]: setting owner of /dev/bus/usb/008/013 to uid=0, gid=0 failed: No such file or directory [ 1002.747907][ T29] audit: type=1400 audit(1739249174.409:698): avc: denied { create } for pid=14844 comm="syz.6.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1002.757922][ T29] audit: type=1400 audit(1739249174.419:699): avc: denied { listen } for pid=14844 comm="syz.6.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1003.293821][T14856] bridge1: entered promiscuous mode [ 1003.293849][T14856] bridge1: entered allmulticast mode [ 1003.303980][T14856] team0: Port device bridge1 added [ 1003.312190][ T29] audit: type=1400 audit(1739249174.979:700): avc: denied { read } for pid=14844 comm="syz.6.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1003.645992][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1003.739302][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1003.919396][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1003.955264][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.955303][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.955344][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1003.955368][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.960545][ T25] usb 3-1: config 0 descriptor?? [ 1004.397983][ T25] kone 0003:1E7D:2CED.0003: unknown main item tag 0x3 [ 1004.425608][T14845] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1004.475117][ T25] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 1004.601418][ T25] kone 0003:1E7D:2CED.0003: couldn't init struct kone_device [ 1004.639374][ T25] kone 0003:1E7D:2CED.0003: couldn't install mouse [ 1004.699319][ T25] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -5 [ 1004.892061][ T25] usb 3-1: USB disconnect, device number 56 [ 1005.596693][ T29] audit: type=1400 audit(1739249177.119:701): avc: denied { ioctl } for pid=14864 comm="syz.7.2046" path="socket:[44086]" dev="sockfs" ino=44086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1005.683462][T14862] xt_socket: unknown flags 0x50 [ 1006.140338][T14862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap17 [ 1006.758731][T14887] netlink: 'syz.6.2054': attribute type 15 has an invalid length. [ 1006.789346][T14887] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2054'. [ 1007.059394][ T5870] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1007.229715][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 1007.241238][ T5870] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1007.385933][ T5870] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.605422][ T5870] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.696482][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.745041][ T5870] usb 7-1: Product: syz [ 1007.779748][ T5870] usb 7-1: Manufacturer: syz [ 1007.799694][ T5870] usb 7-1: SerialNumber: syz [ 1008.169765][ T5870] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1008.217794][ T5870] usb 7-1: USB disconnect, device number 31 [ 1008.682095][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1008.761661][ T970] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1008.963210][ T29] audit: type=1400 audit(1739249180.619:702): avc: denied { mount } for pid=14910 comm="syz.3.2060" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1008.985200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1009.151496][T14202] udevd[14202]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.109341][ T5872] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1010.150855][T14929] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 1010.260416][ T29] audit: type=1400 audit(1739249181.929:703): avc: denied { name_connect } for pid=14924 comm="syz.2.2063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1010.396162][T14933] kvm: kvm [14931]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x0 [ 1010.464970][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 1010.485964][ T5872] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1010.509602][ T5872] usb 8-1: config 0 has no interface number 0 [ 1010.546349][ T5872] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1010.591486][T14872] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1010.605999][ T5872] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1010.623840][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.645537][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.700945][ T5872] usb 8-1: Product: syz [ 1010.734651][ T5872] usb 8-1: Manufacturer: syz [ 1010.740581][T14872] usb 3-1: device descriptor read/64, error -71 [ 1010.773425][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.907220][ T5872] usb 8-1: SerialNumber: syz [ 1011.092535][ T5872] usb 8-1: config 0 descriptor?? [ 1011.109510][T14872] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1011.189127][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.224347][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.296327][ T5872] usb 8-1: can't set config #0, error -71 [ 1011.337483][ T5872] usb 8-1: USB disconnect, device number 14 [ 1011.349308][T14872] usb 3-1: device descriptor read/64, error -71 [ 1011.492643][T14872] usb usb3-port1: attempt power cycle [ 1011.929465][ T29] audit: type=1400 audit(1739249696.320:704): avc: denied { bind } for pid=14944 comm="syz.7.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1011.963592][T14872] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1012.013985][T14872] usb 3-1: device descriptor read/8, error -71 [ 1012.289589][T14872] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1012.365419][T14872] usb 3-1: device descriptor read/8, error -71 [ 1012.567658][T14872] usb usb3-port1: unable to enumerate USB device [ 1013.157478][T14966] fuse: Unknown parameter 'fd0x0000000000000004' [ 1013.310335][ T9578] Bluetooth: hci3: unexpected event for opcode 0xcb1d [ 1013.765221][ T29] audit: type=1326 audit(1739249698.376:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1013.856512][ T29] audit: type=1326 audit(1739249698.386:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1013.879901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.913601][ T29] audit: type=1326 audit(1739249698.386:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1013.937960][ T29] audit: type=1326 audit(1739249698.386:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1014.018705][T14985] autofs: Unknown parameter 'keyring' [ 1014.144838][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1014.656674][ T29] audit: type=1326 audit(1739249698.386:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1014.682604][ T29] audit: type=1326 audit(1739249698.386:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1014.705816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.714068][ T29] audit: type=1326 audit(1739249698.386:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1014.737506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.749534][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1014.769631][ T29] audit: type=1326 audit(1739249698.386:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x7ffc0000 [ 1014.794722][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1014.800141][ T29] audit: type=1326 audit(1739249698.415:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.7.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6b878ed07 code=0x7ffc0000 [ 1014.838698][ T970] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1014.847731][ T25] usb 3-1: New USB device found, idVendor=047d, idProduct=0003, bcdDevice=2f.8c [ 1014.877638][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.896888][ T25] usb 3-1: Product: syz [ 1014.908879][ T25] usb 3-1: Manufacturer: syz [ 1014.918814][ T25] usb 3-1: SerialNumber: syz [ 1014.926100][ T25] usb 3-1: config 0 descriptor?? [ 1015.118535][ T970] usb 7-1: Using ep0 maxpacket: 16 [ 1015.129214][ T970] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1015.137432][ T970] usb 7-1: config 0 has no interface number 0 [ 1015.155028][ T970] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1015.155120][T14972] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1015.709610][ T970] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1015.719224][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.730793][ T970] usb 7-1: Product: syz [ 1015.737163][ T970] usb 7-1: Manufacturer: syz [ 1015.743023][ T970] usb 7-1: SerialNumber: syz [ 1015.752749][ T970] usb 7-1: config 0 descriptor?? [ 1015.941340][T14990] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1016.243939][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.255073][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.820597][ T970] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1016.830162][ T8] usb 3-1: USB disconnect, device number 61 [ 1016.875604][ T970] usb 7-1: USB disconnect, device number 32 [ 1017.024540][T15002] overlayfs: cannot append lower layer [ 1017.081316][T15015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.085730][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1017.085746][ T29] audit: type=1400 audit(1739249701.690:732): avc: denied { getopt } for pid=15001 comm="syz.7.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1017.118129][T15015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.188731][T15025] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2089'. [ 1017.208970][ T29] audit: type=1326 audit(1739249701.780:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.258115][ T29] audit: type=1326 audit(1739249701.790:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.339208][ T29] audit: type=1326 audit(1739249701.790:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.408548][ T29] audit: type=1326 audit(1739249701.790:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.442309][ T25] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1017.476144][T15034] fuse: Unknown parameter 'fd0x0000000000000004' [ 1017.481031][ T29] audit: type=1326 audit(1739249701.790:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.538616][ T29] audit: type=1326 audit(1739249701.790:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.615279][ T29] audit: type=1326 audit(1739249701.790:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.652223][ T25] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1017.660668][ T25] usb 3-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 1017.673854][ T25] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1017.692942][ T29] audit: type=1326 audit(1739249701.790:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x7ffc0000 [ 1017.819730][ T5865] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1017.827842][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1017.848727][ T25] usb 3-1: string descriptor 0 read error: -22 [ 1017.855072][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1017.879114][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.999019][T10748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.092031][ T29] audit: type=1326 audit(1739249701.790:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb231d8b750 code=0x7ffc0000 [ 1018.128880][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1018.384593][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1018.410529][T15021] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1018.421470][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.465665][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1018.478655][ T5865] usb 8-1: Using ep0 maxpacket: 16 [ 1018.485472][ T5865] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.486145][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1018.504691][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1018.511553][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1018.894382][T15049] autofs: Unknown parameter 'keyring' [ 1019.170245][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1019.180248][ T5865] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1019.190032][ T5865] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.193937][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.206540][ T5865] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1019.227511][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1019.256375][T10748] usb 3-1: USB disconnect, device number 62 [ 1019.274867][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1019.408546][ T8] usb 2-1: Manufacturer: syz [ 1019.423649][ T5865] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1019.431797][ T5865] usb 8-1: Manufacturer: syz [ 1019.641767][ T5865] usb 8-1: config 0 descriptor?? [ 1020.228034][T11502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1020.241269][ T8] usb 2-1: config 0 descriptor?? [ 1020.498887][ T9578] Bluetooth: hci2: unexpected event for opcode 0xcb1d [ 1020.908817][ T8] rc_core: IR keymap rc-hauppauge not found [ 1020.938688][ T8] Registered IR keymap rc-empty [ 1020.964264][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.984480][ T5865] rc_core: IR keymap rc-hauppauge not found [ 1021.001266][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.015322][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.023307][ T5865] Registered IR keymap rc-empty [ 1021.028298][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.043313][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.063053][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1021.075964][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.098681][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.131531][ T5865] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1 [ 1021.134015][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input85 [ 1021.158376][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.196779][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1/input86 [ 1021.209528][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.240660][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.268873][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.282982][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.318951][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.329911][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.359271][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.370119][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.388618][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.418648][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.430956][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.448700][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.478564][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.478575][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.498761][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.569665][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.609410][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.672963][ T5865] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1021.687957][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.708568][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.729548][ T8] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1021.737587][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.796513][ T8] usb 2-1: USB disconnect, device number 41 [ 1022.298612][ T5865] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1022.306693][ T5865] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1023.011935][ T5865] usb 8-1: USB disconnect, device number 15 [ 1025.204850][ T8] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1025.398588][ T8] usb 7-1: device descriptor read/64, error -71 [ 1025.449271][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.458805][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.650603][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1025.661181][ T8] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1025.789549][ T5821] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1025.825860][T15132] xt_socket: unknown flags 0x50 [ 1025.970295][ T8] usb 7-1: device descriptor read/64, error -71 [ 1026.078872][ T8] usb usb7-port1: attempt power cycle [ 1026.210024][T15123] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap18 [ 1026.220397][T15123] batman_adv: batadv0: Adding interface: ip6gretap18 [ 1026.227073][T15123] batman_adv: batadv0: The MTU of interface ip6gretap18 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.252845][T15123] batman_adv: batadv0: Not using interface ip6gretap18 (retrying later): interface not active [ 1026.913700][ T5821] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1026.938629][ T8] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1026.948549][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.001939][ T5821] usb 8-1: config 0 descriptor?? [ 1027.036651][ T5821] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1027.055980][ T8] usb 7-1: device descriptor read/8, error -71 [ 1027.211736][ T5821] gp8psk: usb in 128 operation failed. [ 1027.386184][T15146] syz.3.2114: attempt to access beyond end of device [ 1027.386184][T15146] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1027.439354][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1027.439412][ T29] audit: type=1400 audit(1739249712.040:764): avc: denied { write } for pid=15144 comm="syz.1.2115" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1027.480088][ T5821] gp8psk: usb in 137 operation failed. [ 1027.552298][ T5821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1027.567917][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.724482][ T5821] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1028.184307][ T29] audit: type=1400 audit(1739249712.790:765): avc: denied { write } for pid=15151 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1028.193400][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.238685][ T46] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1028.311267][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.428637][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1028.454186][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.466583][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1028.479446][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1028.491965][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1028.504075][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.557198][ T46] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1028.578320][ T46] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1028.606346][ T46] usb 3-1: Manufacturer: syz [ 1028.734375][ T46] usb 3-1: config 0 descriptor?? [ 1029.082519][ T5865] usb 8-1: USB disconnect, device number 16 [ 1029.182456][ T46] rc_core: IR keymap rc-hauppauge not found [ 1029.192752][ T46] Registered IR keymap rc-empty [ 1029.197718][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1029.259392][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1029.309816][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1029.393857][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 1029.897182][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1029.931484][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.949045][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.963667][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1029.989562][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.008680][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.051168][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.118644][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.168893][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.185517][ T9578] Bluetooth: hci2: unexpected event for opcode 0xcb1d [ 1030.259230][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.289828][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.311472][ T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.346752][ T46] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1030.356734][ T46] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1030.623271][ T970] usb 3-1: USB disconnect, device number 63 [ 1030.671377][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1031.565401][T15197] syz.7.2129: attempt to access beyond end of device [ 1031.565401][T15197] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1031.957207][T11502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.044664][ T9578] Bluetooth: hci1: unexpected event for opcode 0xcb1d [ 1032.758793][ T970] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1032.998548][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 1033.014063][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.068731][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.126639][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1033.157800][ T29] audit: type=1400 audit(1739249717.760:766): avc: denied { connect } for pid=15200 comm="syz.7.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1033.177877][ T970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1033.197237][ T970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.228994][ T8] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1033.251708][ T970] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1033.273091][ T970] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1033.288622][ T970] usb 3-1: Manufacturer: syz [ 1033.309622][ T970] usb 3-1: config 0 descriptor?? [ 1033.320544][ T4393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.381278][T15112] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1033.409154][ T8] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1033.420490][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.438808][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.488602][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.511787][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.526567][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.538124][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.561179][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.579038][T15112] usb 2-1: Using ep0 maxpacket: 8 [ 1033.588587][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.601217][T15112] usb 2-1: config 2 has an invalid interface number: 169 but max is 0 [ 1033.618570][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.630739][T15112] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.643918][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.659139][ T970] rc_core: IR keymap rc-hauppauge not found [ 1033.663870][T15112] usb 2-1: config 2 has no interface number 0 [ 1033.671170][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.671206][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.675506][ T970] Registered IR keymap rc-empty [ 1033.699300][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.713685][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.724841][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.732252][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.734789][T15112] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1033.744441][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.764013][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.768483][T15112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.783107][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.792364][T15112] cypress_m8 2-1:2.169: DeLorme Earthmate USB converter detected [ 1033.809104][ T970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1033.813246][T15112] earthmate ttyUSB0: required endpoint is missing [ 1033.827468][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.845837][ T970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input88 [ 1033.875054][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1033.888611][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1033.908867][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.909083][ T46] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1033.925283][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.950695][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.992226][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1034.005544][T15112] usb 2-1: USB disconnect, device number 42 [ 1034.030126][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.031997][T15112] cypress_m8 2-1:2.169: device disconnected [ 1034.042586][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1034.099974][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 1034.151902][ T46] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1034.240238][ T46] usb 8-1: config 0 has no interface number 0 [ 1034.254233][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.333734][ T46] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1034.341040][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1034.405632][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.469936][ T46] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1034.471390][T15220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.492842][ T8] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1034.495202][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.509048][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.523883][T15220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.558724][ T46] usb 8-1: Product: syz [ 1034.578515][ T46] usb 8-1: Manufacturer: syz [ 1034.583161][ T46] usb 8-1: SerialNumber: syz [ 1034.603863][ T8] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1034.628560][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.629422][ T46] usb 8-1: config 0 descriptor?? [ 1034.641013][ T8] usb 7-1: Product: syz [ 1034.660277][ T8] usb 7-1: Manufacturer: syz [ 1034.665594][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.674207][ T8] usb 7-1: SerialNumber: syz [ 1034.710538][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.720229][ T8] usb 7-1: config 0 descriptor?? [ 1034.728597][ T970] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1034.739656][ T8] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 1034.762473][ T970] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1034.782362][ T970] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1034.839271][ T970] usb 3-1: USB disconnect, device number 64 [ 1035.132497][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 1035.152459][ T970] usb 7-1: USB disconnect, device number 37 [ 1035.198211][ T970] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 1035.274739][T15213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.288823][T15213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.288785][T15233] xt_socket: unknown flags 0x50 [ 1036.461549][ T46] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1036.489333][T15233] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap19 [ 1036.506384][ T29] audit: type=1400 audit(1739249721.110:767): avc: denied { getopt } for pid=15234 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1036.525785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.534149][ T46] usb 8-1: USB disconnect, device number 17 [ 1036.541206][T15233] batman_adv: batadv0: Adding interface: ip6gretap19 [ 1036.560989][T15238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.578224][T15233] batman_adv: batadv0: The MTU of interface ip6gretap19 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.609550][T15238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.625197][T15233] batman_adv: batadv0: Not using interface ip6gretap19 (retrying later): interface not active [ 1037.222215][T15245] xt_socket: unknown flags 0x50 [ 1037.789158][ T8229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.398575][T14872] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1038.438990][ T986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.578660][T14872] usb 8-1: Using ep0 maxpacket: 16 [ 1038.610190][T14872] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1038.648461][T14872] usb 8-1: config 0 has no interface number 0 [ 1038.685715][T14872] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1039.368732][T14872] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1039.388672][T14872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.396941][T14872] usb 8-1: Product: syz [ 1039.420645][T14872] usb 8-1: Manufacturer: syz [ 1039.425491][T14872] usb 8-1: SerialNumber: syz [ 1039.445318][T14872] usb 8-1: config 0 descriptor?? [ 1039.462868][ T9578] Bluetooth: hci3: unexpected event for opcode 0xcb1d [ 1040.166574][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.175596][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.248302][T15274] autofs: Unknown parameter 'keyring' [ 1040.343461][T14872] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1040.641689][T14872] usb 8-1: USB disconnect, device number 18 [ 1041.902541][T15286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.946255][T15286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.965141][T15286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.119012][T15286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.997549][ T9578] Bluetooth: hci2: unexpected event for opcode 0xcb1d [ 1043.652092][ T8229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1043.683399][T11504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1044.752174][T15315] autofs: Unknown parameter 'keyring' [ 1046.196662][T15331] xt_socket: unknown flags 0x50 [ 1047.140622][T15347] kvm: kvm [15343]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x0 [ 1049.153273][T15358] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1049.211206][T15372] xt_socket: unknown flags 0x50 [ 1049.401409][T15372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap14 [ 1049.417748][T15372] batman_adv: batadv0: Adding interface: ip6gretap14 [ 1049.424817][T15372] batman_adv: batadv0: The MTU of interface ip6gretap14 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.451016][T15372] batman_adv: batadv0: Not using interface ip6gretap14 (retrying later): interface not active [ 1049.880790][T15378] tmpfs: Bad value for 'mpol' [ 1050.048315][ T4393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1050.048317][ T8228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1050.070046][ T29] audit: type=1326 audit(1739249734.530:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15375 comm="syz.2.2178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3cf78cde9 code=0x0 [ 1050.345376][T15384] netlink: 'syz.7.2180': attribute type 1 has an invalid length. [ 1050.429759][T15388] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2180'. [ 1050.548279][T15384] bond1: entered promiscuous mode [ 1050.554024][T15384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.834524][ T9578] Bluetooth: hci3: unexpected event for opcode 0xcb1d [ 1054.604031][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.612794][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.758574][ T29] audit: type=1400 audit(1739249739.350:769): avc: denied { write } for pid=15420 comm="syz.2.2190" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1054.817373][T15421] Bluetooth: Error in BCSP hdr checksum [ 1054.964109][T13186] Bluetooth: hci1: unexpected event for opcode 0xcb1d [ 1054.991975][ T8] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1055.000795][ T29] audit: type=1400 audit(1739249739.420:770): avc: denied { ioctl } for pid=15420 comm="syz.2.2190" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1055.154801][ T8228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1055.421439][ T8] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1055.458603][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1055.458639][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1055.460663][ T8] usb 8-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1055.564247][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.601164][ T8] usb 8-1: Product: syz [ 1055.615603][ T8] usb 8-1: Manufacturer: syz [ 1055.648579][ T8] usb 8-1: SerialNumber: syz [ 1055.677461][ T8] usb 8-1: config 0 descriptor?? [ 1055.710225][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1055.902525][T15418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.915406][T15418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.324613][T15436] tmpfs: Bad value for 'mpol' [ 1056.343395][ T29] audit: type=1326 audit(1739249740.950:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.6.2195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x0 [ 1056.361335][T15434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15434 comm=syz.7.2191 [ 1056.749335][T13186] Bluetooth: hci4: command 0x1003 tx timeout [ 1056.757463][ T9578] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1056.967477][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.003648][ T8] usb 8-1: USB disconnect, device number 19 [ 1057.903327][T14201] udevd[14201]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.900212][T15465] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4194304, id = 0 [ 1058.925328][ T29] audit: type=1326 audit(1739249743.530:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1058.948729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.974486][ T29] audit: type=1326 audit(1739249743.530:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1059.402720][ T29] audit: type=1326 audit(1739249743.540:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1059.428510][ T970] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1059.468201][ T29] audit: type=1326 audit(1739249743.540:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1059.506177][ T29] audit: type=1326 audit(1739249743.540:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1059.658519][ T970] usb 8-1: Using ep0 maxpacket: 32 [ 1059.668706][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.777398][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.298736][ T29] audit: type=1326 audit(1739249743.560:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1060.328680][ T970] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1060.388656][ T970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.485195][ T29] audit: type=1326 audit(1739249743.580:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fad3a18cde9 code=0x7ffc0000 [ 1060.529687][ T29] audit: type=1326 audit(1739249743.580:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad3a183da7 code=0x7ffc0000 [ 1060.564266][ T970] usb 8-1: config 0 descriptor?? [ 1060.878751][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1060.911098][ T29] audit: type=1326 audit(1739249743.580:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15463 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad3a128fb9 code=0x7ffc0000 [ 1060.934401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1061.089613][ T970] kone 0003:1E7D:2CED.0004: unknown main item tag 0x3 [ 1061.128118][ T970] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.7-1/input0 [ 1061.270820][ T970] kone 0003:1E7D:2CED.0004: couldn't init struct kone_device [ 1061.311733][ T970] kone 0003:1E7D:2CED.0004: couldn't install mouse [ 1061.356315][ T970] kone 0003:1E7D:2CED.0004: probe with driver kone failed with error -5 [ 1061.371607][T15485] tmpfs: Bad value for 'mpol' [ 1061.380003][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1061.380019][ T29] audit: type=1326 audit(1739249745.980:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15484 comm="syz.1.2209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x0 [ 1061.398283][ T970] usb 8-1: USB disconnect, device number 20 [ 1061.479175][T11502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1061.837206][T15491] xt_socket: unknown flags 0x50 [ 1061.902812][T15491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap17 [ 1061.924549][T15491] batman_adv: batadv0: Adding interface: ip6gretap17 [ 1061.931663][T15491] batman_adv: batadv0: The MTU of interface ip6gretap17 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.957665][T15491] batman_adv: batadv0: Not using interface ip6gretap17 (retrying later): interface not active [ 1063.731372][ T29] audit: type=1400 audit(1739249748.338:843): avc: denied { map } for pid=15509 comm="syz.7.2218" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1066.146718][T15537] autofs: Unknown parameter 'keyring' [ 1066.969715][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.228913][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1068.638973][ T5821] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1069.078700][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 1069.112808][ T5821] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1069.139414][ T5821] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1069.160755][ T5821] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1069.172333][ T5821] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1069.187803][ T5821] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1069.219494][ T5821] usb 7-1: config 0 has no interface number 0 [ 1069.333721][ T5821] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1069.345255][ T5821] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1069.356712][ T5821] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1069.368005][ T5821] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.387557][ T5821] usb 7-1: config 0 interface 125 has no altsetting 2 [ 1069.424106][ T5821] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1069.484254][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'. [ 1069.486611][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.568603][ T5821] usb 7-1: Product: syz [ 1069.577749][ T5821] usb 7-1: Manufacturer: syz [ 1069.593103][ T5821] usb 7-1: SerialNumber: syz [ 1069.605041][ T5821] usb 7-1: config 0 descriptor?? [ 1069.617901][ T5821] usb 7-1: selecting invalid altsetting 2 [ 1069.752246][T15569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15569 comm=syz.7.2230 [ 1069.792138][T15569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15569 comm=syz.7.2230 [ 1070.887653][ T5821] usb 7-1: USB disconnect, device number 38 [ 1071.730635][ T29] audit: type=1326 audit(1739249756.328:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1071.878503][ T29] audit: type=1326 audit(1739249756.328:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1071.942168][ T29] audit: type=1326 audit(1739249756.368:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.026229][T15585] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 1072.056249][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.078507][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.112231][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.134257][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.167678][ T29] audit: type=1326 audit(1739249756.768:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.191356][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.417863][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.427835][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.436067][ T29] audit: type=1326 audit(1739249756.768:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.451571][ T986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1072.460269][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.534613][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.542531][ T29] audit: type=1326 audit(1739249756.808:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.577055][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.594304][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.629518][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.643556][ T29] audit: type=1326 audit(1739249756.808:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.668153][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.678657][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.686108][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.706300][ T29] audit: type=1326 audit(1739249756.808:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.731282][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.746907][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.772024][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.808508][ T29] audit: type=1326 audit(1739249757.088:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.839921][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.847380][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.861417][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.878528][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.886068][ T29] audit: type=1326 audit(1739249757.108:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15581 comm="syz.6.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db058cde9 code=0x7ffc0000 [ 1072.909816][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.919392][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.935853][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.958607][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1072.995671][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.003602][ T4393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1073.025026][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.036390][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.056595][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.076011][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.088623][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.107620][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.127597][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.135584][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.148700][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.158822][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.176777][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.186920][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.204942][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.229450][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.236906][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.273170][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.328668][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.348102][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.968696][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1073.976172][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.014268][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.034589][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.063158][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.098564][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.128609][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.168346][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.176339][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.190055][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.202901][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.211757][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.223474][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.232375][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.246695][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 1074.258699][ T46] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1074.264502][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.281021][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.297839][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.306529][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.314372][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.332740][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.340617][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.348045][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.361481][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.398658][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.412848][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.421813][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.430697][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.439835][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.449827][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.457379][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.465548][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.466865][ T46] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1074.475657][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.503406][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.515109][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.523209][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.529964][ T46] usb 8-1: not running at top speed; connect to a high speed hub [ 1074.535764][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.546478][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.559532][T10748] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1074.568672][ T46] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 1074.576829][ T46] usb 8-1: config 0 has no interface number 0 [ 1074.587093][T10748] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1074.597916][ T46] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1074.643896][ T46] usb 8-1: config 0 interface 88 has no altsetting 0 [ 1074.684542][ T46] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1074.713300][ T46] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1074.724224][ T46] usb 8-1: Product: syz [ 1074.741960][ T970] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1074.746615][ T46] usb 8-1: Manufacturer: syz [ 1074.768659][ T46] usb 8-1: SerialNumber: syz [ 1074.784044][ T46] usb 8-1: config 0 descriptor?? [ 1075.038652][ T970] usb 7-1: Using ep0 maxpacket: 16 [ 1075.048056][ T970] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1075.075397][ T970] usb 7-1: config 0 has no interface number 0 [ 1075.399754][ T970] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1075.587144][ T970] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1075.710154][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.718247][ T970] usb 7-1: Product: syz [ 1075.724865][ T970] usb 7-1: Manufacturer: syz [ 1075.731374][ T970] usb 7-1: SerialNumber: syz [ 1075.738840][ T970] usb 7-1: config 0 descriptor?? [ 1076.200335][T15629] autofs: Unknown parameter 'keyring' [ 1076.227858][T15610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.425963][T15610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.568411][ C0] hrtimer: interrupt took 39146 ns [ 1076.845736][ T970] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1076.914255][ T970] usb 7-1: USB disconnect, device number 39 [ 1076.943587][T15602] bond2: entered promiscuous mode [ 1076.949224][T15602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1077.211283][T15645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.242674][T15645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.568648][T10748] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1077.750381][T10748] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1077.769899][T10748] usb 2-1: not running at top speed; connect to a high speed hub [ 1077.815628][T10748] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1077.844589][T10748] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1077.856689][T10748] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1077.869697][T10748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.888086][T10748] usb 2-1: Product: syz [ 1077.898200][T10748] usb 2-1: Manufacturer: syz [ 1077.908334][T10748] usb 2-1: SerialNumber: syz [ 1078.118992][ T4393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.212193][ T46] usb 8-1: USB disconnect, device number 21 [ 1078.519198][T15112] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1078.750571][ T986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.848631][T15112] usb 3-1: device descriptor read/64, error -71 [ 1078.856905][T15657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.190666][T15112] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1079.227244][T15662] syz.6.2254: attempt to access beyond end of device [ 1079.227244][T15662] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1079.448603][T15112] usb 3-1: device descriptor read/64, error -71 [ 1079.569178][T15112] usb usb3-port1: attempt power cycle [ 1079.602524][T15664] tmpfs: Bad value for 'mpol' [ 1079.609925][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1079.609941][ T29] audit: type=1326 audit(1739249764.218:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.7.2259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878cde9 code=0x0 [ 1079.940352][T15112] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1079.982481][T15112] usb 3-1: device descriptor read/8, error -71 [ 1080.230378][T10748] usbhid 2-1:1.0: can't add hid device: -71 [ 1080.237090][T10748] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1080.248671][T10748] usb 2-1: USB disconnect, device number 43 [ 1080.862485][T15112] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1080.919018][T15112] usb 3-1: device descriptor read/8, error -71 [ 1081.141021][T15112] usb usb3-port1: unable to enumerate USB device [ 1082.425386][T15695] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 1082.518144][T15684] bond3: entered promiscuous mode [ 1082.536121][ T29] audit: type=1400 audit(1739249767.138:886): avc: denied { relabelto } for pid=15691 comm="syz.7.2266" name="cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xconsole_device_t:s0" [ 1082.570630][T15684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1082.628509][ T29] audit: type=1400 audit(1739249767.178:887): avc: denied { associate } for pid=15691 comm="syz.7.2266" name="cuse" dev="devtmpfs" ino=100 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xconsole_device_t:s0" [ 1084.181833][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.570890][ T8229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1085.439615][T15725] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2276'. [ 1085.659696][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.707044][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.736777][T15727] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2278'. [ 1086.216902][ T29] audit: type=1400 audit(1739249770.538:888): avc: denied { mount } for pid=15728 comm="syz.1.2277" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1086.720745][ T970] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 1086.904092][ T970] usb 7-1: No LPM exit latency info found, disabling LPM. [ 1086.954365][ T970] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 1086.980194][ T970] usb 7-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.989979][T15745] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2281'. [ 1087.003958][ T970] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1087.013727][ T970] usb 7-1: string descriptor 0 read error: -22 [ 1087.027031][ T970] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1087.051102][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.085083][T15734] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1087.134603][T15747] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2283'. [ 1087.169249][T15747] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2283'. [ 1087.370098][T15756] autofs: Unknown parameter 'keyring' [ 1087.390440][T15753] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 1087.916020][T15753] team0: Device hsr_slave_0 failed to register rx_handler [ 1087.931851][T15734] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2279'. [ 1087.975704][ T5865] usb 7-1: USB disconnect, device number 40 [ 1088.048031][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1088.078690][ T970] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1088.304638][ T970] usb 3-1: config 16 has an invalid interface number: 11 but max is 0 [ 1088.324335][ T970] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.336558][ T970] usb 3-1: config 16 has no interface number 0 [ 1088.356257][ T970] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.e2 [ 1088.371273][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.382007][ T970] usb 3-1: Product: syz [ 1088.386298][ T970] usb 3-1: Manufacturer: syz [ 1088.408491][ T970] usb 3-1: SerialNumber: syz [ 1088.643132][ T9578] Bluetooth: hci1: unexpected event for opcode 0xcb1d [ 1088.694715][T15757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.750104][T15757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.828686][T15757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.848029][T15757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.910717][ T970] usb 3-1: USB disconnect, device number 69 [ 1089.068615][ T5865] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 1089.644225][ T8229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.799622][T15785] syz.1.2291: attempt to access beyond end of device [ 1089.799622][T15785] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1089.828558][ T5865] usb 7-1: No LPM exit latency info found, disabling LPM. [ 1089.855215][ T5865] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 1089.889565][ T5865] usb 7-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1090.156811][ T5865] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1090.171940][ T5865] usb 7-1: string descriptor 0 read error: -22 [ 1090.178916][ T5865] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1090.187987][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.264001][T15772] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1090.504011][T15772] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2292'. [ 1091.135074][ T986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.236822][T10748] usb 7-1: USB disconnect, device number 41 [ 1092.275404][T15803] syzkaller0: entered allmulticast mode [ 1093.392034][ T9578] Bluetooth: hci3: unexpected event for opcode 0xcb1d [ 1093.468787][T10748] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1094.251031][T10748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.262387][T10748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.280970][T10748] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1094.290385][T10748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.300563][T10748] usb 7-1: config 0 descriptor?? [ 1095.270576][T10748] pantherlord 0003:0F30:0111.0006: invalid report_size -1163308797 [ 1095.354923][ T4393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1095.492145][T10748] pantherlord 0003:0F30:0111.0006: item 0 4 1 7 parsing failed [ 1095.527171][T15845] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1095.535400][T15845] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1095.545333][T15845] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1095.553391][T15845] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1095.570108][T10748] pantherlord 0003:0F30:0111.0006: parse failed [ 1095.597726][T10748] pantherlord 0003:0F30:0111.0006: probe with driver pantherlord failed with error -22 [ 1096.030998][T10748] usb 7-1: USB disconnect, device number 42 [ 1096.199242][ T986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1096.448813][T14872] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1096.452814][T15853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2316'. [ 1096.638866][T14872] usb 3-1: Using ep0 maxpacket: 16 [ 1096.655262][T14872] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1096.683046][T14872] usb 3-1: config 0 has no interface number 0 [ 1096.692749][T14872] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1096.705613][T14872] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1096.720602][T14872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.729562][T14872] usb 3-1: Product: syz [ 1096.734049][T14872] usb 3-1: Manufacturer: syz [ 1096.739272][T14872] usb 3-1: SerialNumber: syz [ 1096.756016][T14872] usb 3-1: config 0 descriptor?? [ 1097.247070][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.297109][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.707235][T14872] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1098.732219][T14872] usb 3-1: USB disconnect, device number 70 [ 1098.909037][T10748] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1099.123955][T10748] usb 7-1: Using ep0 maxpacket: 32 [ 1099.202056][T10748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.219258][T14872] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1099.282970][T10748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.348565][T10748] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1099.419549][T10748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.439608][T14872] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1099.467941][ T5871] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1099.489976][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1099.560295][T10748] usb 7-1: config 0 descriptor?? [ 1099.583746][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1099.707970][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1099.740327][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 1099.780080][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1099.791186][ T5871] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1099.818461][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1099.847714][ T5871] usb 2-1: config 0 has no interface number 0 [ 1099.897057][ T5871] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1099.907361][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1099.971563][ T5871] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1099.985701][ T29] audit: type=1400 audit(1739249784.578:889): avc: denied { bind } for pid=15891 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.016978][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.018568][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.051821][T10748] kone 0003:1E7D:2CED.0007: unknown main item tag 0x3 [ 1100.062984][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.111839][T15894] autofs: Unknown parameter 'keyring' [ 1100.192571][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1100.277052][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.300458][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.344960][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1100.370127][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.392225][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.417320][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1100.423061][T10748] kone 0003:1E7D:2CED.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 1100.435661][ T5871] usb 2-1: Product: syz [ 1100.440476][ T5871] usb 2-1: Manufacturer: syz [ 1100.445117][ T5871] usb 2-1: SerialNumber: syz [ 1100.450099][T10748] kone 0003:1E7D:2CED.0007: couldn't init struct kone_device [ 1100.457562][T10748] kone 0003:1E7D:2CED.0007: couldn't install mouse [ 1100.465938][ T5871] usb 2-1: config 0 descriptor?? [ 1100.478725][T10748] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -5 [ 1100.490191][T10748] usb 7-1: USB disconnect, device number 43 [ 1100.500076][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.516467][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.532785][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1100.550316][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.563116][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.589584][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.609364][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.629365][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.646818][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.659278][T15904] gretap0: entered promiscuous mode [ 1100.668230][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1100.687935][T15904] netlink: 'syz.2.2331': attribute type 2 has an invalid length. [ 1100.688110][T14872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.696678][T15904] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2331'. [ 1100.714182][T14872] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.737675][T14872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1100.746366][T15904] syz.2.2331 (15904) used greatest stack depth: 20656 bytes left [ 1100.747255][T14872] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1100.778069][T14872] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1100.791361][T14872] usb 8-1: Product: syz [ 1100.795590][T14872] usb 8-1: Manufacturer: syz [ 1100.795608][T14872] usb 8-1: SerialNumber: syz [ 1100.802840][T14872] usb 8-1: config 0 descriptor?? [ 1100.825277][T14872] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1100.907812][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.917366][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.093678][ T5871] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1101.113752][T14872] IPVS: starting estimator thread 0... [ 1101.121287][ T5871] usb 2-1: USB disconnect, device number 44 [ 1101.147854][T15914] netlink: 'syz.6.2336': attribute type 10 has an invalid length. [ 1101.159161][ T4393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.164113][T15914] team0: Device hsr_slave_0 failed to register rx_handler [ 1101.187463][T14872] usb 8-1: USB disconnect, device number 22 [ 1101.209499][T14872] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1101.218583][T15912] IPVS: using max 30 ests per chain, 72000 per kthread [ 1101.397869][T15921] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 1101.427327][ T29] audit: type=1400 audit(1739249786.018:890): avc: denied { relabelto } for pid=15920 comm="syz.6.2337" name="330" dev="tmpfs" ino=1786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1101.455184][ T29] audit: type=1400 audit(1739249786.018:891): avc: denied { associate } for pid=15920 comm="syz.6.2337" name="330" dev="tmpfs" ino=1786 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 1101.791889][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1102.211772][ T29] audit: type=1400 audit(1739249786.808:892): avc: denied { write } for pid=9574 comm="syz-executor" name="330" dev="tmpfs" ino=1786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1102.312886][ T29] audit: type=1400 audit(1739249786.878:893): avc: denied { remove_name } for pid=9574 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1102.340684][ T29] audit: type=1400 audit(1739249786.888:894): avc: denied { rmdir } for pid=9574 comm="syz-executor" name="330" dev="tmpfs" ino=1786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1102.366918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.491357][T15936] autofs: Unknown parameter 'keyring' [ 1102.694460][T15931] 9pnet_fd: Insufficient options for proto=fd [ 1103.527577][ T29] audit: type=1400 audit(1739249788.118:895): avc: denied { ioctl } for pid=15949 comm="syz.2.2348" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1104.085111][T15961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.115303][T15963] FAULT_INJECTION: forcing a failure. [ 1104.115303][T15963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.138607][T15963] CPU: 1 UID: 0 PID: 15963 Comm: syz.6.2350 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1104.138637][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1104.138647][T15963] Call Trace: [ 1104.138653][T15963] [ 1104.138660][T15963] dump_stack_lvl+0x16c/0x1f0 [ 1104.138687][T15963] should_fail_ex+0x50a/0x650 [ 1104.138714][T15963] _copy_from_user+0x2e/0xd0 [ 1104.138733][T15963] copy_msghdr_from_user+0x99/0x160 [ 1104.138755][T15963] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1104.138791][T15963] ___sys_sendmsg+0xff/0x1e0 [ 1104.138816][T15963] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.138849][T15963] ? __pfx_lock_release+0x10/0x10 [ 1104.138873][T15963] ? trace_lock_acquire+0x14e/0x1f0 [ 1104.138901][T15963] ? __fget_files+0x206/0x3a0 [ 1104.138926][T15963] __sys_sendmsg+0x16e/0x220 [ 1104.138944][T15963] ? __pfx___sys_sendmsg+0x10/0x10 [ 1104.138983][T15963] do_syscall_64+0xcd/0x250 [ 1104.139006][T15963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.139030][T15963] RIP: 0033:0x7f6db058cde9 [ 1104.139046][T15963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.139063][T15963] RSP: 002b:00007f6db1423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.139081][T15963] RAX: ffffffffffffffda RBX: 00007f6db07a5fa0 RCX: 00007f6db058cde9 [ 1104.139094][T15963] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000005 [ 1104.139105][T15963] RBP: 00007f6db1423090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.139116][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.139127][T15963] R13: 0000000000000000 R14: 00007f6db07a5fa0 R15: 00007ffe176a1cc8 [ 1104.139153][T15963] [ 1104.321762][T15961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.497146][T15965] tmpfs: Bad value for 'mpol' [ 1104.507603][ T29] audit: type=1400 audit(1739249789.108:896): avc: denied { bind } for pid=15952 comm="syz.7.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1104.557464][ T29] audit: type=1326 audit(1739249789.138:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.2.2352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3cf78cde9 code=0x0 [ 1105.062344][T15979] autofs: Unknown parameter 'keyring' [ 1105.541224][ T46] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1105.655056][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.688732][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.738503][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 1105.750444][ T46] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.768519][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 1105.778494][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1105.779208][T15991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.807815][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1105.836111][ T46] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1105.860578][ T46] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1105.910535][ T46] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1105.936261][ T46] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1105.970530][ T46] usb 8-1: Manufacturer: syz [ 1106.030528][ T46] usb 8-1: config 0 descriptor?? [ 1106.478860][T10748] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1106.729936][T10748] usb 2-1: Using ep0 maxpacket: 16 [ 1106.743693][T10748] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1106.769995][T10748] usb 2-1: config 0 has no interface number 0 [ 1106.783497][T10748] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1106.844256][T10748] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1106.858475][ T46] rc_core: IR keymap rc-hauppauge not found [ 1106.866642][T10748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.870255][ T46] Registered IR keymap rc-empty [ 1106.888739][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1106.892775][T10748] usb 2-1: Product: syz [ 1106.901859][T10748] usb 2-1: Manufacturer: syz [ 1106.906961][T10748] usb 2-1: SerialNumber: syz [ 1106.918889][T11504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1106.930081][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1106.931324][T10748] usb 2-1: config 0 descriptor?? [ 1106.952717][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1106.986211][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input95 [ 1107.032011][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.058593][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.098551][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.118542][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.138563][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.155827][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.174237][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.181688][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.228609][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.261803][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.290990][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.331705][ T46] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1107.361516][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.363617][ T46] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1107.373527][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.387191][ T46] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1107.408628][ T5871] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1107.414057][ T46] usb 8-1: USB disconnect, device number 23 [ 1107.437938][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 1107.484327][T16017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'. [ 1107.549205][ T986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1107.568791][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 1107.582613][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.594059][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.606466][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1107.617873][ T5871] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1107.631156][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.647980][ T5871] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1107.659645][ T5871] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1107.667934][ T5871] usb 7-1: Manufacturer: syz [ 1107.685546][T10748] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1107.716949][ T5871] usb 7-1: config 0 descriptor?? [ 1107.732418][T10748] usb 2-1: USB disconnect, device number 45 [ 1108.508042][T16026] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2369'. [ 1108.688584][ T5871] rc_core: IR keymap rc-hauppauge not found [ 1108.707682][ T5871] Registered IR keymap rc-empty [ 1108.718859][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1108.748616][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1108.789270][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1108.833554][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input97 [ 1108.939081][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.016786][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.750216][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.768607][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.818648][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.859352][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.867020][T16057] netlink: 'syz.6.2378': attribute type 29 has an invalid length. [ 1109.896243][T16048] tmpfs: Bad value for 'mpol' [ 1109.908544][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.927654][T16057] netlink: 'syz.6.2378': attribute type 29 has an invalid length. [ 1109.957086][ T29] audit: type=1326 audit(1739249794.548:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16047 comm="syz.1.2377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb231d8cde9 code=0x0 [ 1110.016355][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.029820][T16057] netlink: 508 bytes leftover after parsing attributes in process `syz.6.2378'. [ 1110.049961][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.070904][ T5871] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.101137][ T5871] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1110.109584][ T5871] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1110.125684][ T5871] usb 7-1: USB disconnect, device number 44 [ 1110.150498][T16055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2376'. [ 1110.873181][T16077] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2384'. [ 1110.940285][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 1111.228171][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.267581][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.418692][ T970] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1111.435844][T16098] 9pnet_fd: Insufficient options for proto=fd [ 1111.519069][ T5871] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1111.578691][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 1111.591281][ T970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.601780][T10748] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1111.612361][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1111.624896][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1111.635749][ T970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1111.646013][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1111.661126][ T970] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1111.672361][ T970] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1111.681529][ T970] usb 2-1: Manufacturer: syz [ 1111.686839][ T5871] usb 7-1: config 10 has an invalid interface number: 66 but max is 0 [ 1111.698065][ T970] usb 2-1: config 0 descriptor?? [ 1111.704422][ T5871] usb 7-1: config 10 has no interface number 0 [ 1111.711350][ T5871] usb 7-1: config 10 interface 66 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1111.725855][ T5871] usb 7-1: config 10 interface 66 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1111.737436][ T5871] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1f.f9 [ 1111.747040][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.768597][T10748] usb 8-1: Using ep0 maxpacket: 16 [ 1111.777321][T10748] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1111.787010][T10748] usb 8-1: config 0 has no interface number 0 [ 1111.808811][T10748] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1112.133811][ T5871] usb 7-1: string descriptor 0 read error: -71 [ 1112.215729][ T5871] s2255 7-1:10.66: Could not find bulk-in endpoint [ 1112.224941][ T5871] Sensoray 2255 driver load failed: 0xfffffff4 [ 1112.238855][ T5871] s2255 7-1:10.66: probe with driver s2255 failed with error -12 [ 1112.246977][T10748] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1112.256125][T10748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.300546][T10748] usb 8-1: Product: syz [ 1112.306679][ T5871] usb 7-1: USB disconnect, device number 45 [ 1112.315296][T10748] usb 8-1: Manufacturer: syz [ 1112.331037][T10748] usb 8-1: SerialNumber: syz [ 1112.341988][T10748] usb 8-1: config 0 descriptor?? [ 1112.359704][ T29] audit: type=1800 audit(1739249796.958:899): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2393" name="memory.events" dev="tmpfs" ino=2884 res=0 errno=0 [ 1112.363033][T16109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1112.430522][ T29] audit: type=1804 audit(1739249796.968:900): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.2393" name="/newroot/525/memory.events" dev="tmpfs" ino=2884 res=1 errno=0 [ 1112.453125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.478314][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1217.485311][ C1] rcu: 0-...!: (0 ticks this GP) idle=468c/1/0x4000000000000000 softirq=66758/66764 fqs=3 [ 1217.497039][ C1] rcu: (detected by 1, t=10502 jiffies, g=59729, q=151 ncpus=2) [ 1217.504789][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1217.504823][ C0] NMI backtrace for cpu 0 [ 1217.504837][ C0] CPU: 0 UID: 0 PID: 970 Comm: kworker/0:2 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1217.504858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1217.504873][ C0] Workqueue: usb_hub_wq hub_event [ 1217.504898][ C0] RIP: 0010:do_raw_spin_lock+0xae/0x2c0 [ 1217.504919][ C0] Code: 01 00 00 8b 43 04 3d ad 4e ad de 0f 85 81 01 00 00 4c 8d 6b 10 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 c5 01 00 00 48 8b 53 10 65 48 8b 05 e0 bf 6c 7e 48 39 c2 0f [ 1217.504937][ C0] RSP: 0018:ffffc90000007c48 EFLAGS: 00000046 [ 1217.504951][ C0] RAX: dffffc0000000000 RBX: ffffffff9aa5bf58 RCX: ffffffff8195b34e [ 1217.504964][ C0] RDX: 1ffffffff354b7ed RSI: ffffffff8b6cf020 RDI: ffffffff9aa5bf5c [ 1217.504976][ C0] RBP: 1ffff92000000f8a R08: 0000000000000000 R09: fffffbfff2dd7b98 [ 1217.504989][ C0] R10: ffffffff96ebdcc7 R11: 0000000000000006 R12: dffffc0000000000 [ 1217.505001][ C0] R13: ffffffff9aa5bf68 R14: 1ffff92000000fa4 R15: ffffffff9aa5bf50 [ 1217.505020][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1217.505037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.505050][ C0] CR2: 00007ffba409e440 CR3: 00000000252f2000 CR4: 00000000003526f0 [ 1217.505062][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1217.505073][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1217.505085][ C0] Call Trace: [ 1217.505093][ C0] [ 1217.505102][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1217.505133][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1217.505157][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1217.505184][ C0] ? do_raw_spin_lock+0xae/0x2c0 [ 1217.505201][ C0] ? default_do_nmi+0x6a/0x160 [ 1217.505226][ C0] ? exc_nmi+0x170/0x1e0 [ 1217.505250][ C0] ? end_repeat_nmi+0xf/0x53 [ 1217.505279][ C0] ? hlock_class+0x4e/0x130 [ 1217.505300][ C0] ? do_raw_spin_lock+0xae/0x2c0 [ 1217.505317][ C0] ? do_raw_spin_lock+0xae/0x2c0 [ 1217.505334][ C0] ? do_raw_spin_lock+0xae/0x2c0 [ 1217.505351][ C0] [ 1217.505357][ C0] [ 1217.505364][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1217.505381][ C0] ? debug_object_activate+0x149/0x4a0 [ 1217.505403][ C0] ? lock_acquire+0x2f/0xb0 [ 1217.505426][ C0] ? debug_object_activate+0x149/0x4a0 [ 1217.505448][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 1217.505477][ C0] ? debug_object_activate+0x149/0x4a0 [ 1217.505498][ C0] debug_object_activate+0x149/0x4a0 [ 1217.505518][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1217.505544][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1217.505567][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1217.505584][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1217.505602][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1217.505630][ C0] enqueue_hrtimer+0x25/0x3c0 [ 1217.505649][ C0] __hrtimer_run_queues+0x903/0xae0 [ 1217.505670][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1217.505688][ C0] ? read_tsc+0x9/0x20 [ 1217.505708][ C0] ? rcu_is_watching+0x12/0xc0 [ 1217.505729][ C0] hrtimer_interrupt+0x392/0x8e0 [ 1217.505752][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1217.505783][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1217.505813][ C0] [ 1217.505819][ C0] [ 1217.505825][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1217.505851][ C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 1217.505880][ C0] Code: a9 0a 00 00 44 8b 0d 73 c5 d9 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 59 e5 38 00 fb 65 48 8b 1d 60 35 7b 7e <48> 8d bb 08 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 1217.505898][ C0] RSP: 0018:ffffc90003c1e720 EFLAGS: 00000202 [ 1217.505912][ C0] RAX: 00000000002a5397 RBX: ffff8880267fc880 RCX: 1ffffffff2dde203 [ 1217.505924][ C0] RDX: 0000000000000000 RSI: ffffffff8b6ced20 RDI: ffffffff8bd34e00 [ 1217.505936][ C0] RBP: ffffc90003c1e768 R08: 0000000000000001 R09: fffffbfff2dd7ba8 [ 1217.505948][ C0] R10: ffffffff96ebdd47 R11: 0000000000000005 R12: ffff8880b863fa30 [ 1217.505960][ C0] R13: ffff88802e91c880 R14: 0000000000000000 R15: ffff8880b863ec00 [ 1217.505979][ C0] ? __switch_to+0x749/0x1190 [ 1217.505999][ C0] __schedule+0xf4b/0x5890 [ 1217.506032][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1217.506056][ C0] ? __pfx_lock_release+0x10/0x10 [ 1217.506085][ C0] ? __pfx___schedule+0x10/0x10 [ 1217.506113][ C0] ? schedule+0x298/0x350 [ 1217.506139][ C0] ? __pfx_lock_release+0x10/0x10 [ 1217.506165][ C0] ? lock_acquire+0x2f/0xb0 [ 1217.506188][ C0] ? schedule+0x1fd/0x350 [ 1217.506215][ C0] schedule+0xe7/0x350 [ 1217.506242][ C0] schedule_timeout+0x244/0x280 [ 1217.506267][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1217.506295][ C0] ? mark_held_locks+0x9f/0xe0 [ 1217.506320][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1217.506348][ C0] __wait_for_common+0x3e1/0x600 [ 1217.506367][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1217.506393][ C0] ? __pfx___wait_for_common+0x10/0x10 [ 1217.506414][ C0] ? queue_work_on+0xc6/0x140 [ 1217.506445][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.506465][ C0] wait_for_completion_state+0x1c/0x40 [ 1217.506484][ C0] call_usermodehelper_exec+0x3c4/0x4d0 [ 1217.506511][ C0] ? __pfx_call_usermodehelper_exec+0x10/0x10 [ 1217.506540][ C0] ? xen_error_entry+0x30/0x60 [ 1217.506561][ C0] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1217.506589][ C0] ? call_usermodehelper_setup+0x102/0x340 [ 1217.506614][ C0] ? call_usermodehelper_setup+0x252/0x340 [ 1217.506642][ C0] __request_module+0x3f6/0x6c0 [ 1217.506668][ C0] ? rc_map_get+0x126/0x280 [ 1217.506690][ C0] ? __pfx___request_module+0x10/0x10 [ 1217.506717][ C0] ? find_held_lock+0x2d/0x110 [ 1217.506738][ C0] ? __pfx_lock_release+0x10/0x10 [ 1217.506766][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1217.506784][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1217.506801][ C0] ? lock_acquire+0x2f/0xb0 [ 1217.506830][ C0] rc_map_get+0x126/0x280 [ 1217.506853][ C0] rc_register_device+0x394/0x1be0 [ 1217.506877][ C0] ? snprintf+0xc8/0x100 [ 1217.506894][ C0] ? __pfx_snprintf+0x10/0x10 [ 1217.506913][ C0] ? __pfx_rc_register_device+0x10/0x10 [ 1217.506938][ C0] ? device_initialize+0x243/0x510 [ 1217.506966][ C0] mceusb_dev_probe+0x15b8/0x38a0 [ 1217.506991][ C0] ? __pfx_mceusb_dev_probe+0x10/0x10 [ 1217.507014][ C0] ? find_held_lock+0x2d/0x110 [ 1217.507042][ C0] ? __pm_runtime_set_status+0x13c/0x9a0 [ 1217.507066][ C0] usb_probe_interface+0x300/0x9c0 [ 1217.507091][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1217.507115][ C0] really_probe+0x23e/0xa90 [ 1217.507136][ C0] __driver_probe_device+0x1de/0x440 [ 1217.507156][ C0] driver_probe_device+0x4c/0x1b0 [ 1217.507176][ C0] __device_attach_driver+0x1df/0x310 [ 1217.507197][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1217.507216][ C0] bus_for_each_drv+0x157/0x1e0 [ 1217.507243][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1217.507268][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.507287][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1217.507316][ C0] __device_attach+0x1e8/0x4b0 [ 1217.507336][ C0] ? __pfx___device_attach+0x10/0x10 [ 1217.507356][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1217.507375][ C0] bus_probe_device+0x17f/0x1c0 [ 1217.507404][ C0] device_add+0x114b/0x1a70 [ 1217.507427][ C0] ? __pfx_device_add+0x10/0x10 [ 1217.507448][ C0] ? mark_held_locks+0x9f/0xe0 [ 1217.507476][ C0] usb_set_configuration+0x10cb/0x1c50 [ 1217.507503][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1217.507531][ C0] usb_generic_driver_probe+0xb1/0x110 [ 1217.507558][ C0] usb_probe_device+0xec/0x3e0 [ 1217.507578][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1217.507598][ C0] really_probe+0x23e/0xa90 [ 1217.507618][ C0] __driver_probe_device+0x1de/0x440 [ 1217.507636][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 1217.507663][ C0] driver_probe_device+0x4c/0x1b0 [ 1217.507683][ C0] __device_attach_driver+0x1df/0x310 [ 1217.507703][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1217.507722][ C0] bus_for_each_drv+0x157/0x1e0 [ 1217.507748][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1217.507774][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.507792][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1217.507821][ C0] __device_attach+0x1e8/0x4b0 [ 1217.507841][ C0] ? __pfx___device_attach+0x10/0x10 [ 1217.507860][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1217.507880][ C0] bus_probe_device+0x17f/0x1c0 [ 1217.507908][ C0] device_add+0x114b/0x1a70 [ 1217.507931][ C0] ? __pfx_device_add+0x10/0x10 [ 1217.507953][ C0] ? add_device_randomness+0xb8/0xf0 [ 1217.507982][ C0] usb_new_device+0xd09/0x1a20 [ 1217.508003][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1217.508030][ C0] hub_event+0x2d9a/0x4e10 [ 1217.508060][ C0] ? __pfx_hub_event+0x10/0x10 [ 1217.508079][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1217.508105][ C0] ? rcu_is_watching+0x12/0xc0 [ 1217.508123][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1217.508144][ C0] ? process_one_work+0x921/0x1ba0 [ 1217.508167][ C0] ? lock_acquire+0x2f/0xb0 [ 1217.508190][ C0] ? process_one_work+0x921/0x1ba0 [ 1217.508215][ C0] process_one_work+0x9c5/0x1ba0 [ 1217.508242][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 1217.508263][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1217.508290][ C0] ? assign_work+0x1a0/0x250 [ 1217.508313][ C0] worker_thread+0x6c8/0xf00 [ 1217.508341][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1217.508365][ C0] kthread+0x3af/0x750 [ 1217.508388][ C0] ? __pfx_kthread+0x10/0x10 [ 1217.508408][ C0] ? lock_acquire+0x2f/0xb0 [ 1217.508434][ C0] ? __pfx_kthread+0x10/0x10 [ 1217.508455][ C0] ret_from_fork+0x45/0x80 [ 1217.508478][ C0] ? __pfx_kthread+0x10/0x10 [ 1217.508500][ C0] ret_from_fork_asm+0x1a/0x30 [ 1217.508526][ C0] [ 1217.508818][ C1] rcu: rcu_preempt kthread starved for 10485 jiffies! g59729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1218.458448][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1218.468440][ C1] rcu: RCU grace-period kthread stack dump: [ 1218.474443][ C1] task:rcu_preempt state:R running task stack:27328 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1218.487952][ C1] Call Trace: [ 1218.491256][ C1] [ 1218.494205][ C1] __schedule+0xf43/0x5890 [ 1218.498651][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1218.503878][ C1] ? __pfx___schedule+0x10/0x10 [ 1218.508835][ C1] ? schedule+0x298/0x350 [ 1218.513180][ C1] ? __pfx_lock_release+0x10/0x10 [ 1218.518243][ C1] ? lock_acquire+0x2f/0xb0 [ 1218.522845][ C1] ? schedule+0x1fd/0x350 [ 1218.527200][ C1] schedule+0xe7/0x350 [ 1218.531285][ C1] schedule_timeout+0x124/0x280 [ 1218.536164][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1218.541558][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1218.546861][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1218.552684][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1218.558174][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1218.562965][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1218.568278][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1218.572980][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1218.578228][ C1] rcu_gp_kthread+0x271/0x380 [ 1218.582925][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1218.588144][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1218.593356][ C1] ? __kthread_parkme+0x148/0x220 [ 1218.598398][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1218.603648][ C1] kthread+0x3af/0x750 [ 1218.607732][ C1] ? __pfx_kthread+0x10/0x10 [ 1218.612337][ C1] ? __pfx_kthread+0x10/0x10 [ 1218.616938][ C1] ret_from_fork+0x45/0x80 [ 1218.621369][ C1] ? __pfx_kthread+0x10/0x10 [ 1218.625991][ C1] ret_from_fork_asm+0x1a/0x30 [ 1218.630778][ C1] [ 1218.633812][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1218.640138][ C1] CPU: 1 UID: 0 PID: 16111 Comm: syz.3.2393 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1218.650923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1218.660993][ C1] RIP: 0010:smp_call_function_many_cond+0x4e3/0x12c0 [ 1218.667685][ C1] Code: 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 ff 83 e0 01 41 89 c5 <89> c6 e8 d6 ff 0b 00 45 85 ed 75 d0 e8 cc 04 0c 00 e8 c7 04 0c 00 [ 1218.687409][ C1] RSP: 0018:ffffc9000c32fac8 EFLAGS: 00000202 [ 1218.693490][ C1] RAX: 0000000000000001 RBX: ffff8880b8646a00 RCX: ffffc9000d71a000 [ 1218.701481][ C1] RDX: 0000000000080000 RSI: ffffffff81adcee4 RDI: 0000000000000000 [ 1218.709458][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1218.717445][ C1] R10: 0000000000000001 R11: 0000000000000004 R12: ffffed10170c8d41 [ 1218.725436][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 1218.733426][ C1] FS: 00007fad37fd56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1218.742368][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1218.748959][ C1] CR2: 00007fad37fd4f98 CR3: 00000000252f2000 CR4: 00000000003526f0 [ 1218.757026][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1218.764999][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1218.772976][ C1] Call Trace: [ 1218.776347][ C1] [ 1218.779216][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1218.785574][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1218.790784][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1218.796283][ C1] ? timekeeping_advance+0x72e/0xa90 [ 1218.801581][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1218.807233][ C1] ? __asan_memcpy+0x3c/0x60 [ 1218.811843][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 1218.817146][ C1] ? rcu_is_watching+0x12/0xc0 [ 1218.821929][ C1] ? update_process_times+0x178/0x2d0 [ 1218.827320][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1218.833058][ C1] ? update_wall_time+0x1c/0x40 [ 1218.838013][ C1] ? tick_nohz_handler+0x376/0x530 [ 1218.843141][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1218.848609][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1218.853998][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1218.859760][ C1] ? read_tsc+0x9/0x20 [ 1218.863854][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 1218.868986][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1218.875167][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1218.880997][ C1] [ 1218.883966][ C1] [ 1218.886904][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1218.893087][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 1218.899175][ C1] ? smp_call_function_many_cond+0x4e3/0x12c0 [ 1218.905260][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 1218.911350][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1218.916383][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1218.921511][ C1] text_poke_bp_batch+0x22b/0x760 [ 1218.926555][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1218.931592][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1218.937238][ C1] ? text_poke_queue+0xef/0x180 [ 1218.942144][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1218.948412][ C1] text_poke_finish+0x30/0x40 [ 1218.953098][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1218.959091][ C1] jump_label_update+0x1d7/0x400 [ 1218.964481][ C1] static_key_slow_inc_cpuslocked+0x82/0x120 [ 1218.970477][ C1] static_key_slow_inc+0x1a/0x30 [ 1218.975430][ C1] io_uring_setup+0x1970/0x2200 [ 1218.980296][ C1] ? __pfx_io_uring_setup+0x10/0x10 [ 1218.985500][ C1] ? do_futex+0x123/0x350 [ 1218.989842][ C1] ? __pfx_do_futex+0x10/0x10 [ 1218.994547][ C1] ? rcu_is_watching+0x12/0xc0 [ 1218.999326][ C1] __x64_sys_io_uring_setup+0x98/0x140 [ 1219.004796][ C1] do_syscall_64+0xcd/0x250 [ 1219.009834][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.015748][ C1] RIP: 0033:0x7fad3a18cde9 [ 1219.020170][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.039797][ C1] RSP: 002b:00007fad37fd4fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1219.048226][ C1] RAX: ffffffffffffffda RBX: 00007fad3a3a6080 RCX: 00007fad3a18cde9 [ 1219.056376][ C1] RDX: 0000400000000980 RSI: 00004000000008c0 RDI: 000000000000072c [ 1219.064353][ C1] RBP: 00004000000008c0 R08: 0000000000000000 R09: 0000400000000980 [ 1219.072335][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1219.080309][ C1] R13: 0000400000000940 R14: 000000000000072c R15: 0000400000000980 [ 1219.088309][ C1]